Behavioral task
behavioral1
Sample
e0a2d7e8f769c2d279f1582c90c25c3d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e0a2d7e8f769c2d279f1582c90c25c3d_JaffaCakes118
-
Size
7KB
-
MD5
e0a2d7e8f769c2d279f1582c90c25c3d
-
SHA1
270f914dc5761614f8912b5092341fa84e211cc2
-
SHA256
de14d2c38a93232dadb045c934e085aaaab840bd94d16863347d698733a5a544
-
SHA512
4318b112bc75a6fee9211ec2a956eb59f4b9a5e2b443039e02a7f8dbf35aad7e036a70df6a05c65c66f752c9b4db046f59a791a88f937ca37a241317fbf4e9fa
-
SSDEEP
96:LnmqvfBGjOHYppjwDbmIhIATYsjKZ2M2rHDT+qiEfuY66A3fJ5gYfCXSW55I4N3:L7YyUj8RxYsj7CErAESCXSW5m4p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0a2d7e8f769c2d279f1582c90c25c3d_JaffaCakes118
Files
-
e0a2d7e8f769c2d279f1582c90c25c3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e44cfc71d5ba99dd6dedb0e2f43d741
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindResourceExA
user32
GetDlgItemInt
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE